
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: pW3zhGXfAMU7C4eGQ1A/xh+j84XEntXVcJ0MVSmKCdQ=
Subject key identifier: 7A:A0:89:27:60:B2:78:46:66:BD:68:DB:40:04:1D:FA:99:AF:43:FC
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 01A144284F0D3F618C9A1DA3C52B4428967E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 158F
Signing time: Fri 16 Oct 2026 10:00:54 +0000
Manifest this update: Fri 16 Oct 2026 10:00:54 +0000
Manifest next update: Sat 17 Oct 2026 10:00:54 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: QQcJVTIUhjtQc8ok+Puay2Sax+J5P9qLi3sG2+/IXy4=)
2: WKo0w-hQA_6GqLwkYTSFOaF2igk.roa (hash: dXRlU5jeDW7rQk8xbfzgMgBkQT5Cb93wKPdp+cZ/mBg=)
3: ksOPh_2fTunNVDQ0M7oZsMXzMTc.roa (hash: sTuOVD56/9SfiXVEt5t0X+gpGj1raLEEP3xJmICtW0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:28:4f:0d:3f:61:8c:9a:1d:a3:c5:2b:44:28:96:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Oct 16 10:00:54 2026 GMT
Not After : Oct 17 10:00:54 2026 GMT
Subject: CN=7aa0892760b2784666bd68db40041dfa99af43fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e2:79:e5:90:01:99:cb:8a:c8:c0:4d:6f:b5:
99:c0:cc:c5:e6:ef:27:0e:12:2a:74:76:ac:d8:4a:
d3:bd:93:11:55:da:06:73:33:a4:72:34:19:1f:5e:
45:56:68:38:34:43:36:55:ee:df:bb:5b:03:55:13:
7f:35:67:ef:cb:d3:f6:60:ef:ae:35:f0:19:3b:5c:
ca:39:ed:ca:b0:ee:5d:47:ab:c6:15:bc:71:da:a8:
b0:f8:70:a3:66:1b:19:a4:d6:7c:3d:cf:ce:5d:c5:
eb:43:d4:3f:1a:e9:c5:89:0e:d3:40:a5:c4:cb:32:
4e:db:84:98:c0:59:8d:16:39:fc:31:3d:b6:41:53:
82:47:86:36:96:82:4a:19:2b:c7:b5:67:33:eb:68:
89:54:45:18:b4:4f:7f:a7:b3:ca:f0:a1:92:53:8c:
44:68:fe:40:34:59:a7:1e:18:d1:85:06:9f:cc:00:
07:68:18:82:8d:fe:ef:7f:11:bd:68:96:60:6b:a2:
be:58:42:4d:76:69:6c:ca:01:3b:e6:63:ae:18:53:
58:da:5b:8e:3c:aa:99:db:ff:b5:da:ec:f8:97:38:
5e:59:e8:4e:13:7e:79:14:c7:a9:8e:a9:1a:80:1d:
f8:61:1a:f5:a6:07:a0:fe:97:01:49:1a:ed:cb:ee:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:89:27:60:B2:78:46:66:BD:68:DB:40:04:1D:FA:99:AF:43:FC
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:19:e6:5f:f7:c7:45:c3:7e:c5:e6:ff:80:96:d6:6e:68:3b:
b1:e2:b8:94:c5:9f:66:df:03:7e:89:6f:4d:5b:6f:3b:cf:5c:
bb:73:6f:48:f6:2b:6d:74:0f:be:a8:34:24:48:32:2f:e0:22:
7f:02:4e:c6:2d:ef:d1:70:5e:79:d1:f0:71:5c:8c:bb:40:63:
75:f2:db:6e:3e:6f:f4:ba:39:ef:df:3e:91:24:f4:65:37:55:
7f:75:23:d6:9f:b3:28:fb:6e:96:ed:33:b2:11:55:8d:66:7d:
b3:11:10:94:09:b5:63:c5:e3:f7:90:c5:69:f8:68:43:5e:6a:
43:8d:57:18:f1:00:75:ca:5c:2f:f2:30:23:9d:29:3b:b4:6a:
0c:06:49:83:ba:c1:21:82:d0:c5:26:43:f4:04:2d:75:5b:01:
29:f8:df:66:bd:95:31:a6:74:86:6c:bb:e3:a6:eb:de:e8:fb:
6f:89:29:1f:c2:3c:cf:11:ea:37:19:ec:d1:72:84:2b:b8:38:
96:fb:da:21:85:0d:1f:c2:d0:1f:fc:d6:c8:8b:0a:29:d4:64:
64:88:d2:42:3d:60:08:0f:b2:f5:5f:b0:6e:99:a5:e7:16:94:
4e:e2:d2:32:42:96:d9:e1:4e:2a:a3:4e:1a:f5:e0:43:fe:a2:
b2:69:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:39:57 2026 by rpki-client